Posting a suspected scammer’s photo on Facebook, TikTok, X, Reddit, Viber, or other social media in the Philippines can feel like the fastest way to warn others or pressure the person to return your money. But it is legally risky. A public post that identifies a person and calls them a “scammer,” “thief,” “fraudster,” or “estafador” may expose you to cyberlibel, civil damages, privacy complaints, or harassment-related claims, especially if the accusation is unproven, exaggerated, or includes unnecessary personal details.

The safer approach is not to stay silent. It is to preserve evidence, report the scam properly, and warn others in a factual, limited, and non-abusive way. This article explains when posting a suspected scammer’s photo becomes dangerous, what Philippine laws apply, and what you can do instead if you were scammed online.

The Short Answer: It Depends on What You Post and How You Post It

You are not automatically committing a crime just because you post about a bad transaction. Filipinos regularly post warnings about bogus sellers, fake investment schemes, rental scams, romance scams, job scams, and GCash or bank transfer fraud.

The legal problem begins when your post does any of the following:

Publicly identifies a person by photo, full name, address, phone number, workplace, school, family members, or ID
Accuses that person of a crime before there is an official finding
Uses words like “scammer,” “magnanakaw,” “estafador,” “fraud,” “criminal,” “budol,” or “wanted”
Encourages people to harass, message, threaten, shame, or “hunt down” the person
Posts private information such as IDs, home address, phone number, account numbers, children’s photos, or private chats
Demands payment while threatening public humiliation

A post that says, “This person is a scammer. I am posting their face so everyone can shame them,” is very different from a post that says, “I paid this seller on July 1 for a phone, but the item has not been delivered and the seller has stopped replying. I have reported the transaction to the platform and my e-wallet.”

The first post sounds like a public accusation of a crime. The second post focuses on verifiable facts.

Why Calling Someone a “Scammer” Online Can Be Cyberlibel

In Philippine law, libel is a public and malicious imputation of a crime, vice, defect, or act that tends to dishonor, discredit, or cause contempt against a person. This definition comes from Article 353 of the Revised Penal Code. Article 354 also says defamatory imputations are presumed malicious, even if true, unless good intention and justifiable motive are shown. Article 355 punishes libel made through writing or similar means. (Lawphil)

When the accusation is posted online, it may become cyberlibel under Section 4(c)(4) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012. RA 10175 expressly includes libel committed through a computer system or similar means. (Supreme Court E-Library)

A social media post may be cyberlibel if these elements are present:

Element	What it means in real life
Imputation	You accuse someone of scamming, stealing, fraud, dishonesty, or another act that damages reputation
Publication	At least one other person sees the post, comment, story, reel, tweet, group post, or shared screenshot
Identification	The person can be recognized through name, face, username, phone number, account number, or context
Malice	The law may presume malice, unless the post is justified, made in good faith, and limited to a proper purpose

A photo makes identification much easier. Even if you do not write the person’s full name, a face, profile screenshot, nickname, business page, or GCash name may be enough for others to identify them.

“But It’s True” Is Not Always a Complete Protection

Many people assume that if they were really scammed, they are free to post everything. That is not how Philippine libel law works.

Truth can help, but Article 354 of the Revised Penal Code still requires good intention and justifiable motive when a defamatory imputation is made. A post may still be risky if it includes insults, threats, exaggerations, or personal details not needed to warn the public. (Lawphil)

For example:

“I paid ₱8,000 and did not receive the item” is a factual statement.
“This person is a professional scammer and should be jailed” is an accusation.
“Everyone message her family and employer” may look like harassment.
“I will delete this only if you pay me today” can create a separate legal problem.

The more your post looks like punishment, public shaming, or revenge, the harder it is to defend as a good-faith warning.

What the Supreme Court Has Said About Cyberlibel

The Supreme Court upheld online libel under RA 10175 in Disini v. Secretary of Justice, explaining that cyberlibel is not a completely new crime but libel committed through a computer system or similar online means. The Court also emphasized that online libel applies to the author of the libelous statement, not simply to people who receive and react to the post. (Supreme Court E-Library)

This matters because the person who writes the original accusation is usually at greatest risk.

A later Supreme Court ruling in People v. Soliman clarified that courts may impose a fine instead of imprisonment in online libel cases, depending on the circumstances, but imprisonment remains legally possible. The Court stated that the fine for online libel may range from ₱40,000 to ₱1,500,000, based on the amended libel fine under RA 10951 and the one-degree-higher penalty under RA 10175. (Supreme Court E-Library)

In Causing v. People, the Supreme Court affirmed that cyberlibel prescribes in one year from discovery by the offended party, authorities, or their agents. This is important because a post may still create problems long after upload if the person claims they discovered it later. (Supreme Court of the Philippines)

Posting a Photo Can Also Raise Data Privacy Issues

A person’s photo can be personal information if the person can be identified from it, especially when combined with a name, phone number, social media profile, address, school, workplace, account number, or transaction screenshots.

Under Republic Act No. 10173, the Data Privacy Act of 2012, personal information includes information from which a person’s identity is apparent or can be reasonably and directly ascertained. Processing includes collecting, using, disclosing, sharing, or storing personal information. (National Privacy Commission)

The National Privacy Commission has reminded the public that sharing photos and videos containing personal data on social media must have a lawful basis and must follow the principles of transparency, legitimate purpose, and proportionality. The NPC also warned that irresponsible sharing may expose people to identity theft, fraud, cyberbullying, harassment, or stalking. (National Privacy Commission)

In simple terms:

Transparency means people should generally know how their personal data is being used.
Legitimate purpose means there must be a lawful and reasonable reason for using it.
Proportionality means you should not share more information than necessary.

If your goal is to warn people about a suspicious seller, it may not be proportional to post the person’s government ID, home address, relatives, children, private messages, phone number, workplace, or unblurred bank details.

Civil Liability: Even If No Criminal Case Is Filed

Even if the post does not result in a cyberlibel conviction, the person you posted about may still file a civil case for damages.

The Civil Code gives broad protection against abusive conduct and privacy violations:

Article 19 requires every person to act with justice, give everyone their due, and observe honesty and good faith.
Article 20 provides liability for willfully or negligently causing damage contrary to law.
Article 21 provides liability for willfully causing loss or injury in a manner contrary to morals, good customs, or public policy.
Article 26 protects dignity, personality, privacy, and peace of mind, and allows damages or other relief for similar acts that humiliate or disturb another person. (Lawphil)

This is why “I was angry” or “I wanted to warn others” does not always end the discussion. Courts look at whether the post was fair, necessary, truthful, and proportionate.

The Difference Between a Warning and an Accusation

A helpful public warning usually focuses on transaction facts. A risky accusation focuses on branding a person as a criminal.

Lower-risk wording	Higher-risk wording
“I paid ₱3,500 on June 30 for this item, but I have not received delivery or refund.”	“This person is a scammer and thief.”
“Has anyone else transacted with this account?”	“Everyone, expose this criminal.”
“I have reported this to the platform and e-wallet.”	“Message her employer and family.”
“Please be careful with this account while I verify.”	“Wanted! Estafador!”
“These are the transaction details, with private data blurred.”	“Here is her full address, ID, phone number, and relatives.”

The word “suspected” helps a little, but it is not magic. A post saying “suspected scammer” beside a clear photo can still communicate to readers that the person committed fraud.

Safer Ways to Warn Others Online

If you need to alert others, use a careful, factual format.

Safer public post format

I am sharing this to check if others had the same experience. On [date], I paid [amount] for [item/service] through [payment channel]. As of [date], I have not received the item/refund, and the account has stopped responding. I have reported the transaction to the platform/payment provider. Please be careful and verify before sending money.

This kind of post is safer because it:

States facts you can prove
Avoids calling the person a criminal
Avoids unnecessary personal information
Shows that you are reporting through proper channels
Does not encourage harassment

What to blur before posting

If you post screenshots, blur or remove:

Full face, unless truly necessary and legally defensible
Home address
Phone number
Email address
Government ID numbers
Bank or e-wallet account numbers, except the last few digits if needed
Children’s photos
Names of relatives
Private sexual, medical, family, or employment details
Messages unrelated to the transaction

What to Do Instead of Posting the Suspect’s Photo

If money or property is involved, the stronger move is to build a complaint that investigators, prosecutors, banks, e-wallets, and platforms can act on.

1. Preserve evidence before the post disappears

Save evidence in a way that shows authenticity and timeline:

Take screenshots showing the full conversation, profile link, username, date, and time.
Save the profile URL, post URL, marketplace listing, order page, and payment confirmation.
Screen-record yourself opening the profile, conversation, listing, and transaction record.
Keep receipts, bank transfer slips, GCash/Maya confirmations, courier tracking, and invoices.
Export chat history where possible.
Do not edit the original files.
Keep a written timeline of what happened, with dates and amounts.
Save the phone number, account name, account number, email, and delivery details used by the other party.

A notarized affidavit is often useful later because complaints normally require a sworn statement, but screenshots themselves should still be preserved in their original digital form.

2. Report to the payment channel immediately

For bank transfers and e-wallets, speed matters. Report the transaction as soon as possible and ask about account restriction, chargeback, reversal, or fraud investigation procedures.

Prepare:

Your valid ID
Transaction reference number
Date, time, and amount
Receiving account name and number
Screenshots of the conversation
Proof that goods or services were not delivered

Banks and e-wallets usually do not guarantee recovery, but early reporting improves the chance of tracing or freezing suspicious activity.

3. Report to the platform or marketplace

If the transaction happened on Facebook Marketplace, Shopee, Lazada, Carousell, TikTok Shop, Instagram, Telegram, Viber, WhatsApp, or a dating app, report the account inside the platform.

This may help:

Preserve account records
Suspend fake accounts
Stop further victims
Support later requests from law enforcement

4. File with the PNP Anti-Cybercrime Group or NBI Cybercrime Division

RA 10175 identifies the National Bureau of Investigation (NBI) and the Philippine National Police (PNP) as law enforcement authorities for cybercrime cases, and directs them to organize cybercrime units or centers handled by trained investigators. (Supreme Court E-Library)

For online scams, you may approach:

Office	When it is relevant	What to prepare
PNP Anti-Cybercrime Group	Online scams, hacked accounts, fake profiles, cyber fraud, identity misuse	ID, screenshots, URLs, payment proof, timeline, suspect details
NBI Cybercrime Division	Cybercrime complaints, online fraud, identity theft, more complex or cross-location cases	ID, complaint details, digital evidence, transaction records
City or Provincial Prosecutor’s Office	Filing or pursuing criminal complaints after evidence is prepared	Complaint-affidavit, attachments, witnesses’ affidavits
National Privacy Commission	Misuse or malicious disclosure of personal data	Notarized complaint-assisted form or verified complaint, evidence, witness affidavits

The NBI Citizen’s Charter page for investigative assistance for victims of computer crimes identifies the NBI CyberCrime Division as the handling office and states that the service is available to the general public. (National Bureau of Investigation)

5. Prepare a complaint-affidavit

A complaint-affidavit is your sworn written statement. It should be clear, chronological, and supported by attachments.

Include:

Your full name, address, and contact details
The suspect’s known name, username, phone number, email, account number, and links
Date and time of each relevant event
Amount paid and payment method
What was promised
What actually happened
How you tried to resolve it
List of attached evidence
Names of witnesses, if any

For cybercrime and estafa complaints, the facts matter more than emotional language. Avoid conclusions like “professional syndicate” unless you have evidence.

What Crime May the Actual Scammer Have Committed?

The suspected scammer, if proven, may face liability under several laws depending on the facts.

Estafa under Article 315 of the Revised Penal Code

Many online scam situations are analyzed as estafa, or swindling, under Article 315 of the Revised Penal Code. Estafa may involve defrauding another through false pretenses, fraudulent acts, abuse of confidence, fictitious names, or deceit before or at the same time the victim parts with money or property. (Lawphil)

A common example is a fake seller who pretends to have an item, receives payment, and never intends to deliver.

Computer-related fraud or identity theft under RA 10175

RA 10175 also punishes computer-related fraud and computer-related identity theft. Computer-related identity theft includes intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another without right. (Supreme Court E-Library)

This can matter when a scammer uses another person’s photo, name, business page, ID, or account to deceive victims.

Access device, banking, securities, or investment laws

If the scam involves credit cards, bank accounts, SIM cards, online lending, investments, cryptocurrency, securities, or fake business solicitations, other laws and regulators may be involved. Depending on the scheme, reports may also be relevant to the bank, e-wallet provider, Securities and Exchange Commission, Department of Trade and Industry, or Bangko Sentral-supervised institution.

Special Situations

The photo came from the person’s public Facebook profile

A public profile photo is not automatically free for public shaming. The fact that a photo is visible online does not mean you may use it for any purpose, especially to accuse someone of a crime. The risk increases when you add labels like “scammer,” “wanted,” or “do not transact with this criminal.”

The person used a fake account

Be extra careful. Many scams use stolen photos. If you post the face, you may be exposing an innocent person whose photo was copied by the real scammer.

A safer post would focus on the account, transaction, and payment details, while avoiding an unverified claim that the person in the photo is the actual scammer.

You found the suspect’s government ID

Do not post the full ID online. Government IDs contain sensitive personal information and can be misused for identity theft. Submit it to investigators, the platform, bank, or e-wallet instead.

You want to post in a private group

A private group is still publication if other people can see the post. Cyberlibel does not require a post to be visible to the entire internet. A barangay group, buy-and-sell group, homeowners’ group, Viber group, or Messenger group can still create legal exposure.

You are an OFW or foreigner outside the Philippines

Philippine cybercrime jurisdiction can still matter if an element happened in the Philippines, a computer system in the Philippines was used, the damage was caused to a person in the Philippines, or the offender is a Filipino national. RA 10175 gives Regional Trial Courts jurisdiction over cybercrime violations, including violations by Filipino nationals regardless of place of commission, and where elements or damage are connected to the Philippines. (Supreme Court E-Library)

If you are abroad and dealing with a Philippine-based scam, preserve evidence and use official reporting channels. If documents must be executed abroad for Philippine use, notarization through the Philippine Embassy or Consulate, or apostille where applicable, may be needed depending on the receiving office.

Common Mistakes That Make Victims Vulnerable

1. Posting while angry

Posts written in anger often include insults, threats, and exaggerations. Those are the exact words later used as evidence in cyberlibel or civil damages claims.

2. Posting the wrong person

Online scammers often use stolen photos, mule accounts, fake names, or borrowed e-wallets. The face in the profile may not be the person who received your money.

3. Publishing private information

Posting addresses, IDs, phone numbers, relatives, children, workplaces, or school information can look like doxxing or harassment. It can also create Data Privacy Act issues.

4. Threatening to post unless paid

Saying “Pay me now or I will post your face everywhere” is risky. Article 356 of the Revised Penal Code punishes threatening to publish libel or offering to prevent publication for compensation. (Lawphil)

5. Relying only on a barangay blotter

A barangay blotter may document an incident, but it does not trace accounts, preserve platform data, subpoena records, or prosecute cybercrime. For online scams, cybercrime investigators, prosecutors, platforms, banks, and e-wallets are usually more relevant.

Practical Risk Checklist Before Posting

Before posting a suspected scammer’s photo, ask:

Can I prove every factual statement in my post?
Am I accusing this person of a crime, or merely describing my transaction?
Is the person in the photo definitely the person who scammed me?
Am I posting only what is necessary?
Have I blurred IDs, addresses, phone numbers, children, and unrelated personal details?
Does my post encourage harassment or threats?
Have I already reported to the platform, bank, e-wallet, PNP, NBI, or prosecutor?
Would I be comfortable attaching this post to a court filing?

If the answer to any of these is no, do not post the photo in its current form.

Better Alternatives to Posting the Photo

Use these instead:

File a report with the platform or marketplace.
Report the transaction to the bank or e-wallet immediately.
File with PNP Anti-Cybercrime Group or NBI Cybercrime Division.
Submit the person’s photo, ID, links, phone number, and payment details privately to investigators.
Warn others using transaction facts without naming or showing the person’s face unless truly necessary.
Post in a neutral way asking for information, not declaring guilt.
Blur unnecessary personal data.
Keep a copy of all deleted posts, messages, and profile changes.

Frequently Asked Questions

Can I legally post a scammer’s photo on Facebook in the Philippines?

It is legally risky if you identify the person and accuse them of being a scammer before the matter is officially proven. You may expose yourself to cyberlibel, civil damages, or privacy complaints. A safer approach is to report the person to the platform, bank, e-wallet, PNP Anti-Cybercrime Group, or NBI, and make any public warning factual and limited.

Is saying “suspected scammer” enough to avoid cyberlibel?

Not always. Courts look at the overall meaning of the post. If the photo, caption, comments, and context make readers believe the person committed fraud, the word “suspected” may not protect you.

Can I post screenshots of our conversation?

You can preserve screenshots as evidence, but posting them publicly can still be risky if they include private information or defamatory statements. Blur phone numbers, addresses, IDs, account numbers, children’s names, and unrelated private details. For law enforcement, keep unedited originals.

What if the person really scammed me?

Even then, post carefully. Truth helps, but Philippine libel law also looks at good intention and justifiable motive. Stick to provable facts, avoid insults, and report through proper channels.

Can I post the person’s GCash number or bank account?

Avoid posting full account numbers or phone numbers publicly. These may be personal information and can be misused. Submit them to the e-wallet provider, bank, platform, PNP, NBI, or prosecutor instead.

Can I share another victim’s post about the scammer?

Sharing can still spread defamatory or private information. The Supreme Court in Disini limited cyberlibel liability mainly to the author of the libelous post, not people who simply receive and react to it, but adding your own accusation, caption, or comments can create your own risk. (Supreme Court E-Library)

Can the suspected scammer sue me even if I am the victim?

Yes. Being a victim of a bad transaction does not automatically prevent the other person from filing a cyberlibel complaint, civil damages case, or privacy complaint. Whether they will succeed depends on the facts, evidence, wording, and context.

Where should I report an online scam in the Philippines?

For cyber-related scams, common offices include the PNP Anti-Cybercrime Group, NBI Cybercrime Division, and the prosecutor’s office. Also report immediately to the platform, bank, e-wallet, courier, or marketplace involved.

How long do cyberlibel cases have to be filed?

The Supreme Court has affirmed that cyberlibel prescribes in one year from discovery by the offended party, authorities, or their agents. This does not mean every old post is safe; discovery and proof of prescription can become factual issues. (Supreme Court of the Philippines)

What is the safest way to warn others?

Warn others by stating only verifiable transaction facts, avoiding criminal labels, blurring private data, and saying that the matter has been reported or is being verified. Do not post unnecessary photos, IDs, addresses, or family information.

Key Takeaways

Posting a suspected scammer’s photo online in the Philippines can lead to cyberlibel, civil damages, and data privacy issues.
Calling someone a “scammer,” “thief,” or “estafador” is risky because it can be treated as an accusation of a crime.
Truth alone may not be enough; Philippine libel law also considers good intention, justifiable motive, and malice.
A public profile photo is not automatically safe to use for public shaming.
The safest public warning is factual, limited, and focused on the transaction—not insults or punishment.
Do not post full IDs, addresses, phone numbers, bank details, family members, or children’s photos.
Preserve evidence first, then report to the platform, bank, e-wallet, PNP Anti-Cybercrime Group, NBI Cybercrime Division, or prosecutor.
Submit identifying details privately to proper authorities instead of exposing them to the public.